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طبقا لقوانين اللكية الفكرية 

جميع حقو النشر و التوزيم الالكترونبي 
نقل أو إعادة نسخ أو إعادة بيعم اى جزءمن 
هذا المصنف و بثه الكترونيا (صبر الانترنت أو 
للمكتبات الالكترونية أو الأقسراص المدمجسة أو اى 
وسيلة أخرى ) دون الحصول على إذن ڪتابي من 
كتنب عربية. حقوق الطبم الو رقي محقوظة 
للموّلف أو ناشره طبقا للتعاقدات السارية. 
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.KEHSYILKGP -D 
.(sms) JAAQF Fee | yREalf KEP - di 
«(eprs) BABKIFRiGEKÛG Kf KG - Ë 
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.! RGRVA+ dg 
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GNAAHAKÛĞT F LFûThE fiPaFezÃi!f 
.K HDA 
:DNRE- Cd 

oi ÃegÛF yi ef BBIMDSD!Rj! Ed pë LÃAÇ 
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CUT KORf LEAAERHUF 5 5 RF KG! +R! 
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.Oerig 
Gu Ãd¥NJE PedZgg !f f PeRf YAv Adz D 
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Pki technology 
- The profiles rpf pki operational 
management protocols must be based on 
pkix (x. 509 — based pki). 
- The profile for qualified certificates must 
be based on x. 509 (rfc 3739). 
- At least one of the following algorithms 
must be deployed: 
o Symmetric algorithms (AES, {N} 
DES, CASTS, BLOWFISH, 
TWOFISH, IDEA etc). 
o Asymmetric algorithms (DSA, 
RSA, ELGAMAL, RC {N} ete). 
o Hash algorithms (MD5, SHA-1 
224 etc). 
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- Minimum RSA/ DS A key length must 
be at least 1024 bits until the end of 
2006. ncreaing the length to 2048 bits is 
recommended with a view to 
guaranteeing long term security levels. 

- Abaseline certificate policy for service 
providers issuing qualified certificates 
should be written according frame work 
RFC 3647. 
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Hardware security modules 
For e-signature creation and verification 
product and in trustworthy hardware devices 
used as secure signature creation devices, 1t 1s 
required 1t have concurrent acceptance and 
usage of FIBS 140 —- 1 level 3 or higher or 
equivalent standard such as suitable protection 
profile based on common criteria (iso 15408). 
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Smart cards 

Smart cards are able to store private e- 
signature keys for acard holder without 
delivering the key to outside world. Therefore 
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the calculation of the signature algorithm as 
well as its storage is proformed in ahighly 
secure environment inside asmart card thus, 1t 
is required to have smart card (reader/ 
readerless/ contactless) which use the most 
advanced security standard avaible in the 
market. 

Security evalution ITSEC E4 OR NIST FIPS 

x.509v3 certificates Iso 7816 

Cryptographic algorithms must include RSA. SHA-1 

MICROSOFT PC/SC Recommende: capi- 

Microsoft cryptographic 
Recommended: pkcs #11 Recommended: pkcs#5 
(interface) (syntax standard) 
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Security standards 

- general security management codes of 
practice, such as BS7799-2 (british 
standard, information security 
management system specification with 
guidance for use) and Its guidance 
ISO/IEC 17799 (recommended) < or 
equivalent standard. 
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Operation standards 

Recommended: ETSI (the European 
telecommunications standards institute) TS 101 
456 v 1.2.1 (2002 — 04) policy requirements for 
certification authorities issuing qualified 
certification, specifically chapter 7 which 
covers the following parts: 

- certification practice statement. 

- Key management life cycle. 

- Certificate management life cyrcle. 

- CA management and operation. 

Or equivalent standard. 
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